Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138608.roa
File: AS138608.roa (raw, json)
Hash identifier: TYTM1Ayow8gb5Y9aejkPkgEUkyXzRBgzyYTqbxQuK+0=
Subject key identifier: E4:F8:A7:42:84:D1:E8:A0:11:9C:29:8C:7D:00:FB:45:01:2D:BD:2F
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 351BD167D34E8FD256906BC86FDC3E776570331D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138608.roa
Signing time: Wed 02 Apr 2025 10:00:00 +0000
ROA not before: Wed 02 Apr 2025 09:55:00 +0000
ROA not after: Wed 01 Apr 2026 10:00:00 +0000
asID: 138608
IP address blocks: 103.13.206.0/23 maxlen: 24
103.30.194.0/23 maxlen: 24
103.37.124.0/23 maxlen: 24
103.56.82.0/23 maxlen: 24
103.67.186.0/23 maxlen: 24
103.187.146.0/23 maxlen: 24
103.189.234.0/23 maxlen: 24
103.210.54.0/23 maxlen: 24
103.250.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Apr 2025 20:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1b:d1:67:d3:4e:8f:d2:56:90:6b:c8:6f:dc:3e:77:65:70:33:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 2 09:55:00 2025 GMT
Not After : Apr 1 10:00:00 2026 GMT
Subject: CN=E4F8A74284D1E8A0119C298C7D00FB45012DBD2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:02:07:85:57:fc:94:25:e5:61:e6:23:64:
31:db:38:50:60:59:87:42:5f:7b:c3:a5:05:64:6e:
f3:65:a2:58:54:08:73:1e:7f:ed:dc:52:81:a3:62:
43:df:2a:3b:94:ee:85:9a:da:42:59:df:ba:f3:77:
12:ee:9e:0e:03:a8:87:d2:81:3e:09:b8:82:3b:24:
6d:2e:9f:27:76:ee:4d:87:42:dd:67:af:3c:22:8f:
6e:cd:f4:0a:b8:06:f8:0c:a5:e0:21:0c:1c:c3:ea:
cf:b3:aa:72:24:e5:65:a6:58:9e:5b:84:ee:6f:7f:
18:c3:29:e3:eb:51:3d:00:ee:7d:24:fa:4e:a9:45:
e7:1f:43:a1:e3:1b:3c:45:b7:a1:3f:51:af:c4:b6:
42:2c:25:a8:cb:2c:c0:11:27:9b:8f:27:a3:df:c8:
08:26:23:c3:75:06:d7:86:e8:83:e0:ee:66:0c:9e:
50:bf:bc:fa:b3:a3:cc:cd:7e:88:e3:46:10:11:f3:
d5:80:6b:ec:0d:a1:65:dc:9c:3b:d2:6c:85:9a:f3:
0a:12:7e:7b:44:cc:30:aa:57:a0:e5:48:95:6d:30:
33:ae:08:65:e2:ef:e1:7c:78:f7:26:8e:06:eb:89:
e0:e0:ed:6e:a5:d8:50:4c:17:66:de:b0:27:28:e8:
8b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F8:A7:42:84:D1:E8:A0:11:9C:29:8C:7D:00:FB:45:01:2D:BD:2F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138608.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.13.206.0/23
103.30.194.0/23
103.37.124.0/23
103.56.82.0/23
103.67.186.0/23
103.187.146.0/23
103.189.234.0/23
103.210.54.0/23
103.250.10.0/23
Signature Algorithm: sha256WithRSAEncryption
01:e6:89:e4:f8:b1:3d:57:50:be:57:39:7c:79:5b:c9:7e:6c:
e8:27:56:8e:35:31:25:5a:9c:86:fa:73:96:a3:4c:d7:98:5c:
c2:0e:7b:ef:a7:35:2c:b3:b8:53:e4:aa:00:c7:94:a1:b9:ed:
10:c7:98:9d:5b:c6:ec:e5:69:37:94:e5:b6:d5:62:63:a5:1f:
b1:c6:3d:60:9c:c4:31:65:6d:91:63:a6:4a:27:51:8c:2d:10:
a0:5b:5a:51:b9:a6:33:2a:03:1c:6b:cd:b5:fb:1a:fb:0d:c0:
8b:65:4a:7b:42:a4:0d:4d:fd:33:6e:d4:44:a2:27:ec:d8:07:
d8:95:b5:1c:22:6d:b0:3d:41:5a:66:48:e9:b1:49:9b:b5:4e:
d2:17:b9:e6:16:48:58:4e:9a:cd:8c:ba:2a:54:fc:1e:93:7f:
0f:66:dc:47:d4:89:5c:41:74:96:f1:30:c3:c2:52:f6:a5:e9:
c8:7f:13:c2:e2:7d:09:ca:11:dc:4d:8b:3c:f2:7d:9d:6f:99:
9b:f4:38:24:b3:9a:ba:22:ae:5c:c5:a2:1a:2a:98:3e:1d:2a:
ef:67:53:96:99:9d:be:53:5e:d4:9c:62:bc:c2:e2:16:34:fd:
db:4f:48:69:6c:ac:e8:ad:25:0d:45:6c:bc:8d:69:51:a2:e8:
66:1f:40:e1
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUNRvRZ9NOj9JWkGvIb9w+d2VwMx0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQwMjA5NTUwMFoX
DTI2MDQwMTEwMDAwMFowMzExMC8GA1UEAxMoRTRGOEE3NDI4NEQxRThBMDExOUMy
OThDN0QwMEZCNDUwMTJEQkQyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMLAAgeFV/yUJeVh5iNkMds4UGBZh0Jfe8OlBWRu82WiWFQIcx5/7dxSgaNi
Q98qO5TuhZraQlnfuvN3Eu6eDgOoh9KBPgm4gjskbS6fJ3buTYdC3WevPCKPbs30
CrgG+Ayl4CEMHMPqz7OqciTlZaZYnluE7m9/GMMp4+tRPQDufST6TqlF5x9DoeMb
PEW3oT9Rr8S2QiwlqMsswBEnm48no9/ICCYjw3UG14bog+DuZgyeUL+8+rOjzM1+
iONGEBHz1YBr7A2hZdycO9JshZrzChJ+e0TMMKpXoOVIlW0wM64IZeLv4Xx49yaO
BuuJ4ODtbqXYUEwXZt6wJyjoixUCAwEAAaOCAgAwggH8MB0GA1UdDgQWBBTk+KdC
hNHooBGcKYx9APtFAS29LzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODYwOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBPBggrBgEFBQcBBwEB/wRAMD4w
PAQCAAEwNgMEAWcNzgMEAWcewgMEAWclfAMEAWc4UgMEAWdDugMEAWe7kgMEAWe9
6gMEAWfSNgMEAWf6CjANBgkqhkiG9w0BAQsFAAOCAQEAAeaJ5PixPVdQvlc5fHlb
yX5s6CdWjjUxJVqchvpzlqNM15hcwg5776c1LLO4U+SqAMeUobntEMeYnVvG7OVp
N5TlttViY6UfscY9YJzEMWVtkWOmSidRjC0QoFtaUbmmMyoDHGvNtfsa+w3Ai2VK
e0KkDU39M27URKIn7NgH2JW1HCJtsD1BWmZI6bFJm7VO0he55hZIWE6azYy6KlT8
HpN/D2bcR9SJXEF0lvEww8JS9qXpyH8TwuJ9CcoR3E2LPPJ9nW+Zm/Q4JLOauiKu
XMWiGiqYPh0q72dTlpmdvlNe1JxivMLiFjT9209IaWys6K0lDUVsvI1pUaLoZh9A
4Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:18 2025 by rpki-client on console.sobornost.net